Lucene search

K

[email protected]NVD:CVE-2003-1562

HistoryDec 31, 2003 - 5:00 a.m.

CVE-2003-1562

2003-12-3105:00:00

CWE-362

[email protected]

web.nvd.nist.gov

7.6 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

9.5 High

AI Score

Confidence

High

0.065 Low

EPSS

Percentile

93.7%

sshd in OpenSSH 3.6.1p2 and earlier, when PermitRootLogin is disabled and using PAM keyboard-interactive authentication, does not insert a delay after a root login attempt with the correct password, which makes it easier for remote attackers to use timing differences to determine if the password step of a multi-step authentication is successful, a different vulnerability than CVE-2003-0190.

Affected configurations

NVD

Node

openbsdopensshMatch1.2

OR

openbsdopensshMatch1.2.1

OR

openbsdopensshMatch1.2.2

OR

openbsdopensshMatch1.2.3

OR

openbsdopensshMatch1.2.27

OR

openbsdopensshMatch1.3

OR

openbsdopensshMatch1.5

OR

openbsdopensshMatch1.5.7

OR

openbsdopensshMatch1.5.8

OR

openbsdopensshMatch2

OR

openbsdopensshMatch2.1

OR

openbsdopensshMatch2.1.1

OR

openbsdopensshMatch2.2

OR

openbsdopensshMatch2.3

OR

openbsdopensshMatch2.3.1

OR

openbsdopensshMatch2.5

OR

openbsdopensshMatch2.5.1

OR

openbsdopensshMatch2.5.2

OR

openbsdopensshMatch2.9

OR

openbsdopensshMatch2.9.9

OR

openbsdopensshMatch2.9.9p2

OR

openbsdopensshMatch2.9p1

OR

openbsdopensshMatch2.9p2

OR

openbsdopensshMatch3.0

OR

openbsdopensshMatch3.0.1

OR

openbsdopensshMatch3.0.1p1

OR

openbsdopensshMatch3.0.2

OR

openbsdopensshMatch3.0.2p1

OR

openbsdopensshMatch3.0p1

OR

openbsdopensshMatch3.1

OR

openbsdopensshMatch3.1p1

OR

openbsdopensshMatch3.2

OR

openbsdopensshMatch3.2.2

OR

openbsdopensshMatch3.2.2p1

OR

openbsdopensshMatch3.2.3p1

OR

openbsdopensshMatch3.3

OR

openbsdopensshMatch3.3p1

OR

openbsdopensshMatch3.4

OR

openbsdopensshMatch3.4p1

OR

openbsdopensshMatch3.5

OR

openbsdopensshMatch3.5p1

OR

openbsdopensshMatch3.6

OR

openbsdopensshMatch3.6.1

OR

openbsdopensshMatch3.6.1p1

OR

openbsdopensshMatch3.6.1p2

References

bugs.debian.org/cgi-bin/bugreport.cgi?bug=248747

www.securityfocus.com/archive/1/320153

www.securityfocus.com/archive/1/320302

www.securityfocus.com/archive/1/320440

www.securityfocus.com/bid/7482

cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf

7.6 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

9.5 High

AI Score

Confidence

High

0.065 Low

EPSS

Percentile

93.7%

Related for NVD:CVE-2003-1562

cve3 cvelist3 nessus4 debiancve3 ubuntucve1 nvd2 openvas3 redhat1 securityvulns2 ubuntu1 seebug3 packetstorm1 exploitpack1 checkpoint_advisories1 exploitdb1 ics1